openwrtv3/package/network/config/firewall/Makefile

#
# Copyright (C) 2013 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=firewall
PKG_VERSION:=2013-06-05
PKG_RELEASE:=$(PKG_SOURCE_VERSION)

PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=git://nbd.name/firewall3.git
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_VERSION:=6e6a38ea87aebeaefe70869c226cadad0312f144
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>


include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/kernel.mk
include $(INCLUDE_DIR)/cmake.mk

define Package/firewall
  SECTION:=net
  CATEGORY:=Base system
  TITLE:=OpenWrt C Firewall
  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables
endef

define Package/firewall/description
 This package provides a config-compatible C implementation of the UCI firewall.
endef

define Package/firewall/conffiles
/etc/config/firewall
/etc/firewall.user
endef

define Build/Configure
	$(foreach file,$(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext.a)),$(CP) $(file) $(PKG_BUILD_DIR)/libext.a)
	$(foreach file,$(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext4.a)),$(CP) $(file) $(PKG_BUILD_DIR)/libext4.a)
	$(foreach file,$(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext6.a)),$(CP) $(file) $(PKG_BUILD_DIR)/libext6.a)
	$(call Build/Configure/Default)
endef

TARGET_CFLAGS += -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections
CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)

define Package/firewall/install
	$(INSTALL_DIR) $(1)/sbin
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3
	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall
	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
	$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall
	$(INSTALL_DIR) $(1)/etc/config/
	$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall
	$(INSTALL_DIR) $(1)/etc/
	$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user
endef

$(eval $(call BuildPackage,firewall))
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`#`
			`# Copyright (C) 2013 OpenWrt.org`
			`#`
			`# This is free software, licensed under the GNU General Public License v2.`
			`# See /LICENSE for more information.`
			`#`

			`include $(TOPDIR)/rules.mk`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`PKG_NAME:=firewall`
firewall: update to git head (#13652) - simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst' - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones SVN-Revision: 36854 2013-06-05 11:40:40 +00:00			`PKG_VERSION:=2013-06-05`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_RELEASE:=$(PKG_SOURCE_VERSION)`

			`PKG_SOURCE_PROTO:=git`
firewall: fix git source url SVN-Revision: 36839 2013-06-04 12:23:47 +00:00			`PKG_SOURCE_URL:=git://nbd.name/firewall3.git`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)`
firewall: update to git head (#13652) - simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst' - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones SVN-Revision: 36854 2013-06-05 11:40:40 +00:00			`PKG_SOURCE_VERSION:=6e6a38ea87aebeaefe70869c226cadad0312f144`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz`
			`PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>`


			`include $(INCLUDE_DIR)/package.mk`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00			`include $(INCLUDE_DIR)/kernel.mk`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`include $(INCLUDE_DIR)/cmake.mk`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`SECTION:=net`
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`CATEGORY:=Base system`
			`TITLE:=OpenWrt C Firewall`
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/description`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`This package provides a config-compatible C implementation of the UCI firewall.`
			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/conffiles`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 13:45:09 +00:00			`/etc/config/firewall`
			`/etc/firewall.user`
			`endef`

firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`define Build/Configure`
			`$(foreach file,$(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext.a)),$(CP) $(file) $(PKG_BUILD_DIR)/libext.a)`
			`$(foreach file,$(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext4.a)),$(CP) $(file) $(PKG_BUILD_DIR)/libext4.a)`
			`$(foreach file,$(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext6.a)),$(CP) $(file) $(PKG_BUILD_DIR)/libext6.a)`
			`$(call Build/Configure/Default)`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00			`endef`

			`TARGET_CFLAGS += -ffunction-sections -fdata-sections`
firewall3: update to git head - fixes linking issues with some toolchains SVN-Revision: 36703 2013-05-24 12:49:06 +00:00			`TARGET_LDFLAGS += -Wl,--gc-sections`
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/install`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`$(INSTALL_DIR) $(1)/sbin`
firewall3: fix accidentally changed install directive SVN-Revision: 36840 2013-06-04 12:30:50 +00:00			`$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`$(INSTALL_DIR) $(1)/etc/init.d`
			`$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall`
			`$(INSTALL_DIR) $(1)/etc/hotplug.d/iface`
			`$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 13:45:09 +00:00			`$(INSTALL_DIR) $(1)/etc/config/`
			`$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall`
			`$(INSTALL_DIR) $(1)/etc/`
			`$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`$(eval $(call BuildPackage,firewall))`